contract-testing_admin_list_roles

What contract-testing_admin_list_roles does on SmartBear MCP

AI agents call contract-testing_admin_list_roles to retrieve information from SmartBear MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why contract-testing_admin_list_roles is rated Low

This tool retrieves and queries role definitions from a workspace without modifying, deleting, or executing operations. It is a read-only administrative query with minimal blast radius if misused by an AI agent—an attacker could learn about role structure but cannot escalate privileges or modify system state through this tool alone.

From the tool's definition Tool name contains 'list' and description explicitly states 'List all roles defined in the workspace'. The action is purely informational retrieval with no data modification, deletion, or execution of external operations.

Risk signalsAdmin/system-level operation

The rule that runs contract-testing_admin_list_roles safely

PolicyLayer is an MCP gateway: it sits between your AI agents and SmartBear MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For contract-testing_admin_list_roles, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "contract-testing_admin_list_roles": {}
  }
}

Questions about contract-testing_admin_list_roles